bind9.18 security update

32:9.18.29-14.11 - Fix CVE-2026-19662: NOQNAME proof use-after-free could crash recursive resolver...

CLSA-2026-1790003616 bind: Fix of 3 CVEs

CVE-2026-19666: clear the NOQNAME proof alias on the DNS64 filter64 path in queryfind, so queryaddnoqnameproof no longer dereferences the rdataset that queryfilter64 had already returned to the message rdataset pool - CVE-2026-19667: reject negative cache records that do not fit in a dnsrdatat; a...

CVE-2026-19662 qpcache NOQNAME proof use-after-free crashes recursive resolver

An attacker may be able to cause a named resolver to abort. The attack requires inducing the victim resolver to send multiple queries for a DNSSEC-signed zone hosted by an authoritative server under the control of the attacker. If the auth responds with a particular sequence of crafted answers, a...